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Abstract —We classify the complexity of the LTL satisfiahility 
and model checking problems for several standard paramet¬ 
erisations. The investigated parameters are temporal depth, 
number of propositional variables and formula treewidth, resp., 
pathwidth. We show that all operator fragments of LTL under 
the investigated parameterisations are intractable in the sense of 
parameterised complexity. 

I. Introduction 

In the last decade the research on parameterised complexity 
of problems increased signihcantly. Beyond the foundations by 
Downey and Fellows [6] until today several deep algorithmic 
techniques have been introduced and new approaches have 
been made; so it really is a highly prospering area of research 
(e.g., see for an overview of the current evolution the recent 
book of Downey and Fellows [7]). Essentially the main 
approach is to detect a parameterisation for a given problem 
and achieve a runtime which is independent of the parameter. 
For instance, given the problem of propositional satishability a 
quite naive parameterisation is the number of variables (of the 
given formula (ji). Then one can easily construct a deterministic 
algorithm solving the problem in time 2^ • \(j)\ where k is 
the number of variables in 4>. If k is assumed to be hxed 
then this yields a polynomial runtime wherefore one says that 
this problem is fixed-parameter tractable (FPT). In general, 
a problem is in FPT if there exists a deterministic algorithm 
solving the problem for any instance in f(k) ■ poly{n) steps 
where k is the parameter, n is the input length, and / is an 
arbitrary computable function; another name for this class is 
para-P. In contrast with this, runtimes of the form are 

highly undesirable as the runtime depends on the parameter’s 
value—this is the runtime of algorithms in the class XP. 
Further some kind of parameterised intractability hierarchy 
is built between FPT and XP, namely the W-hierarchy. It is 
known that FPT C W[l] C W[2] C ■ • • C XP but not if 
any of these inclusions is strict. For proving hardness results 
with respect to the classes of the W-hierarchy one usually 
uses fpt-reductions which translate, informally speaking, the 
instances in the usual sense from one parameterised problem 
to another but also take care of maintaining the parameter’s 
value. Hence showing W[l]-hardness of a problem yields the 
unlikeliness of it to be hxed-parameter tractable. Also classes 
like para-NP—similarly to para-P but using non-deterministic 
algorithms instead—or para-PSPACE have been introduced. 



The hrst contains the W-hierarchy and is by itself contained 
in para-PSPACE. Further they are incomparable to XP—under 
reasonable complexity class inclusion assumptions. 

While the parameterised complexity theory is heavily built 
on top of logic, its application is relatively new in the context 
of logic itself. Not many signihcant parameterisations are 
known yet. Recent approaches were modal, resp., temporal 
operator nesting depth [12, 16] or various types of treewidth, 
like primal or incidence treewidth of CNF formulas [18]. Our 
treewidth parameter is a further generalisation and can be 
measured on general syntax trees of formulas and not only 
on CNFs. 

Temporal logic is a well-known and very important area 
relevant in many helds of research, e.g., program verihcation 
and artihcial intelligence. Its origins are traceable even to 
greek philosophers yet it founds its introduction by Arthur 
Prior in the 1960s [17]. Conceptually its main ingredients 
are combinations of a universal or existential path quantifier 
together with temporal operators referring to specihc or vague 
moments of time, e.g., next, globally, future, until. Depending 
on how these quantihers and operators may be combined the 
three most important logics have been dehned. In Computation 
Tree Logic (or short CTL) one is allowed to use only pairs 
of a single path quantiher and a single temporal operator; 
in Linear Temporal Logic (LTL) one uses only temporal 
operators and has a single existential (or universal, depending 
on the definition of the logic) path quantiher in front of 
the formula; in the Full Branching Time Logic (CTL*) any 
arbitrary combination is allowed. After a decade of seminal 










work from Allen Emerson, Clarke, Halpern, Schnoebelen, and 
Sistla [4, 8, 19, 20]—to name only a few—the most important 
concepts, e.g., satisfiability and model checking have been well 
understood and classified with respect to their computational 
complexity. Recently the mentioned decision problems have 
been investigated in the light of a study which considers 
fragments of the logics in the sense of allowed operators 
[1, 14], 

In this paper we focus on the logic LTL and its PSPACE- 
complete model checking. We want to investigate its paramet- 
erised complexity under the mentioned parameterisations of 
operator fragments. 

A. Related Work 

The parameterised complexity of modal logic satisfiability 
has been investigated by Praveen recently [16]. He considered 
treewidth of some CNE-centered graph representation struc¬ 
ture. In a work of Szeider from 2004 he discusses different 
parameterisation approaches with respect to propositional sat¬ 
isfiability [22]. In particular, he explains how to obtain primal 
graphs and other structural parameterisations. Recently, Liick 
et al. classified the parameterised complexity of satisfiability 
for the computation tree logic CTL [12]. Essentially we follow 
the used parameterisations from Liick et al. in this paper. 
The results comply with the results of Bauland et al. who 
investigated the existential version of LTL [1]. Outside the 
context of parameterised complexity theory, many simple cases 
of LTL were studied by Demri and Schnoebelen [5]. 

B. Organization of this paper 

At first we will define the relevant notions and terms 
around temporal logic, parameterised complexity, and our 
used structural parameterisations. Then in Section III we will 
present our classification for the different parameterisations 
and decision problems. We start with satisfiability and the main 
part is about model checking. Linally in Section IV we will 
conclude and give an outlook on further steps. 

II. Preliminaries 

A. Temporal Logic 

Usually temporal logic is defined through Kripke semantics. 
In the following we will briefly introduce the notion around 
it. Lor a deeper introduction, we refer the reader to the 
survey article from Meier et al. [15]. Lormally a Kripke 
structure A = {W, R, V) is a finite set W of worlds (or 
states), R: W x W is a total transition relation (i.e., for 
every w G W there exists a w' G lU such that wRw' 
holds), and V: W ^ ^ valuation function assigning 

sets of propositions to states, where PROP is a finite set of 
propositions. A path tt = popi ... is an infinite sequence of 
states such that piRpi+i holds for i G N. A path starting at 
the root of a model is also called a run. Lor w G W write 
n(r(;) for the set of all paths starting in w. Write 7r[i] for the 
world Pi and tt* for the suffix path PiPi+i ... of tt. The set of 


all well formed linear temporal logic formulas CTC is defined 
inductively via the following grammar in BNP 

ip ::= p I -i(^ \ ip /\{p\ Xip I fip I ipV(p, 

where p G PROP. 

Now let A = (IT, R, V) be a Kripke structure, p, ip be two 


L7X-formulas, and 

TT be 

a path in A. Then it holds that 
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The usual shortcuts are obtained by combinations of these 
operators, e.g., Gp = -^f^p, or p ^ ip = -^p V ip. 
If T C {X, F, G,U} is a set of temporal operators, then 
CTC{T) is the restriction of CTC to formulas containing only 
temporal operators from T. In the following we consider the 
relevant decision problems with respect to a fix set of temporal 


operators T for this paper. 

Problem: 

Input: 

Question: 

LTL-SAT(r) 

£7X(r)-formula p 

Does there exist a Kripke structure A and 
a path TT in A. such that {A, tt) |= pi 


Problem: 

Input: 

Question: 

LTL-MC(T) 

A Kripke structure A, a world w G W 

and £7X(T)-formula p 

{A,tt) ^ p for all paths tt G n(w)? 


Note that the model checking problem is also sometimes 
defined with existential semantics, i.e., at least one path has to 
satisfy the formula, which leads to complementary complexity 
results. 

Definition 1. The temporal depth td( ) of an LTL formula is 
defined recursively: 

td(a;) := 0 if a; G PROP, td(-ii^) := td((/?), 

X.A{p/\ip) := max{td((p),td(i/>)}, 
td{Tp) -.= td(</?) -F 1 for T G {X, F, G}, 
td((pUi/>) := max{td(</?), td(i/>)} + 1. 

Definition 2. Define CTCdT) as the fragment of CTC{T) 
which has temporal depth at most c. Define LTLc-MC(T), 
resp., LTLc-SAT(T) as the model checking, resp., satisfiability 
problem restricted to formulas in CTCc{T). 

B. Parameterised Complexity 

Definition 3 (Parameterised problem). Let Q C E* be a 
decision problem and let k: E* —> N be a computable 
function. Then we call k a parameterisation of Q and the 
pair n = {Q, k) a parameterised problem. 




Definition 4 (Fixed-parameter tractable). Let 11 = {Q, k) be 
a parameterised problem. If there is a deterministic Turing 
machine M and a computable function /: N N s.t. for 
every instance x G T,* 

• M decides correctly if x G Q, and 

• M has a runtime bounded by f{K,{x)) ■ 

then we say that M is an fpt-algorithm for If and that If is 
fixed-parameter tractable. We define FPT as the class of all 
parameterised problems that are fixed-parameter tractable. 

Similarly, we refer to a function / as fpt-computable w.r.t. 
a parameter k if there is another computable function h such 
that f(x) can be computed in time h{K{x)) ■ \x\^'^^\ 

Definition 5 (fpt-reduction). Let (P, k) and (Q, A) be para¬ 
meterised problems over alphabets S, resp., A. Then a func¬ 
tion /: E* —7> A* is an fpt-reduction if it is fpt-computable 
w.r.t. K and there is a computable function /i: N N s.t. the 
following holds f.a. x G E*: 

• X G P f{x) G Q and 

• A(/(a;)) < h{^n{xf), i.e., A is bounded by k. 

If there is an fpt-reduction from {P, k) to {Q, A) for 
parameterised problems (P, k) and {Q, A) then we call (P, k) 
fpt-reducible to (Q, A), denoted by (P, k) (Q, A). 


Definition 6 (W[l]). The class W[l] is the class of paramet¬ 
erised problems {Q, k) such that {Q, k) can be fpt-reduced to 
the Short Single-Tape Turing Machine Halting Problem: 


Problem: 

SSTMH 

Input: 

Non-deterministic single-tape Turing ma¬ 
chine M, Integer k 

Question: 

Does M accept the empty string in at most 
k steps? 

Parameter: 

k 


Definition 7 (Parameterised hardness). A problem (P, k) is C- 
hard under fpt-reductions for a parameterised complexity class 
C if (Q,A) G C implies {Q,X) {P,k). If additionally 

(P, k) G C, we say that (P, k) is C-complete under fpt- 
reductions. 

Definition 8 (W[P]). The class W[P] contains the paramet¬ 
erised problems {Q, k) for which there is a computable 
function / and an NTM deciding if x G Q holds in 
time /(k(x)) • with at most 0{k{x) ■ log \x\) non- 

deterministic steps. 

Flum and Grohe state how to obtain parameterised variants 
of classical complexity classes [9]. They define for “standard” 
complexity classes C the corresponding parameterised versions 
para-C. Here, “standard” means that the class C is defined 
via usual resource-restricted Turing machines. For most such 
classes C we obtain para-C by simply appending an additional 
factor /(k) to the resource bound, as done for P leading to 
FPT. This is possible for certain classes that Flum and Grohe 
call robust, such as NP and PSPACE. This allows the following 
definitions: 


Definition 9 (para-NP). The class para-NP contains the para¬ 
meterised problems {Q, k) for which there is a computable 
function / and an non-deterministic Turing machine deciding 
if a; G Q holds in time f{n{x)) ■ 

Definition 10 (para-PSPACE). The class para-PSPACE con¬ 
tains the parameterised problems {Q, k) for which there is 
a computable function / and a deterministic Turing machine 
deciding if a; G Q holds in space f{K{x)) ■ 

Definition 11 (Slice). The f-th slice of a parameterised 
problem {Q, k) is denoted with {Q, k)i and defined as: 

{Q, k)i := {x \ x G Q and k{x) = ^ } 

Proposition 12 ([9]). For C G {NP, coNP, PSPACE} it holds 
that a parameterised problem {Q, k) is hard for para-C if and 
only if a finite union of slices of {Q, k) is hard for C. 

Definition 13 (Complement Class). Eor a complexity class 
C, define coC as the class of problems for which their 
complement is in C. 

C. Structural Treewidth and Pathwidth 

The treewidth of a graph is a parameter that leads to EPT 
algorithms for a wide range of otherwise intractable graph 
problems. In fact, only few known graph problems stay hard 
on trees. The treewidth of a graph is in this sense a measure 
of its “tree-alikeness”. 

A path-decomposition P of a structure A is similarly 
defined to tree-decompositions however P has to be a path. 
Here pw(.4) denotes the pathwidth of A. Likewise the size of 
the pathwidth describes the similarity of a structure to a path. 
Observe that pathwidth bounds treewidth from above. 

Given a structure A we define a tree-decomposition of 
A (with universe A) to be a pair (T, X ) where X = 
{Bi,... ,Bf\ is a family of subsets of A (the set of bags), 
and T is a tree whose nodes are the bags Bi satisfying the 
following conditions: 

1) Every element of the universe appears in at least one 
bag: U 

2) Every Tuple is contained in a bag: for each 
(oi, ..., Ofe) G R where i? is a relation in A, there exists 
a B G X such that (oi, ..., ak} G B. 

3) Eor every element a the set of bags containing a is 
connected: for all a G A the set {B \ a G B} forms 
a connected subtree in T. (Eor path-decompositions is 
has to form a connected path.) 

Definition 14 (Graph treewidth and pathwidth). The width of 
a tree-decomposition T is its maximal bag size minus one. 
The treewidth of a graph G is the minimal width of a tree- 
decomposition of G, and its pathwidth is the minimal width 
of a path-decomposition. 

Definition 15 (Syntactical structure of formulas). We associate 
a formula ip with a graph S{p), resp., S^p which represents 
the formula. The map S is defined as follows: Let S{p) := 
(SF*(i^),i?). The set SF(i^) is the set of all syntactically 



valid subformulas of ip (counting equal subformulas multiple 
times if necessary). SF*((/?) is then obtained from SF(i^) 
by identifying nodes which represent the same propositional 
variable inside tp. The edge set E is obtained from p by 
connecting each pair (V'jV'O G SF*((p) x SF*{p) for which 
-tp' is a maximal strict subformula inside ip. 

We assume a well-defined association with parentheses s.t. 
every node of S{p) represents exactly one Boolean function 
or temporal operator and its children represent its arguments. 
Then S can be interpreted as a “graphical” representation 
of p in the sense of a syntax tree. Merging the leaves 
with the same propositional variables then leads to a cyclic 
graph. The motivation of using the “syntax graph” treewidth 
is that independent subformulas, i.e., subformulas without 
common variables, intuitively can be handled independently 
of each other. If many subformulas are connected by common 
variables this is reflected by a high treewidth. 

Definition 16 (Formula treewidth and pathwidth). For a for¬ 
mula p its treewidth tw((/?), resp., pathwidth pw((p) is simply 
defined as tw(iS(^), resp., pw(iS;^). 

The syntax graph as defined above is a generalisation of the 
incidence graph of a CNF formula, and the incidence graph 
of a CNF is contained as a graph minor in its syntax graph; 
Simply merge all propositional variables with its negations, 
then for every clause contract all edges that belong to it. 
Then delete the disjunction nodes above the clauses. Therefore 
the structural treewidth is an upper bound for the incidence 
treewidth, the same holds for the pathwidth. This implies 
that all hardness results regarding the structural treewidth or 
pathwidth also hold for the incidence treewidth or pathwidth. 

III. Parameterised Complexity Results 
A. Satisfiability 

Theorem 17. For F C T, G C T or U C T, the problems 
(LTL-SAT(r),td-F pw^) and (LTL-SAT(T), td-F tw^) are 
W[l\-hard, i.e., LTL-SAT(r) parameterised by temporal depth 
together with syntactical pathwidth, resp., treewidth. 

Proof. The result is proven by an fpt-reduction from the para¬ 
meterised problem p-PW-SAT which was shown to be W[l]- 
hard by Praveen [16]. An instance of p-PW-SAT is a tuple 
I = {p, k, {Qi)ie[k], (COiew) where p is a propositional 
formula in CNF with variables {qi,... ,qn}. The variables are 
partitioned into pairwise disjoint subsets {Qi ,..., Qk}- The 
values Ci € N are the capacities of the partitions, i.e., the exact 
number of variables in Qi that must be set to true which is the 
weight of the partition. An assignment is called saturated if 
every partition has weight equal to its capacity. For an instance 
/ we say that I G p-PW-SAT if p has an assignment that is 
both satisfying and saturated. The parameter of p-PW-SAT is 
k{I) := k + p'w{G^) where G<^ is the primal graph of the 
CNF p. The primal graph of a CNF is the graph that contains 
all propositions as vertices and edges for those variables that 
occur together in a clause. For the reduction, we consider an 
LTL formula ip{I) € £7X(F, G) that has constant temporal 


depth and /t-bounded pathwidth (and therefore treewidth). The 
formula ip{I) is a conjunction of the following subformulas: 


[formula] ■= p, 

n—1 

t/>[depth] •= G /\ ^{di A -^di+i) -G {rm mod 2 

i=0 

A mod 2 ) A F((ii+1 A ^di+2)) 

n 

iplfixed-Q] := /\ [{qt -G Gqt) A (-.gi ^ G^qf] , 

n 

t/>[signal] :=G l\ {di A -^di+i) -A 
- 

k 

t/>[init] := do A ^di AG /\ [T° A _L°] , 


p=i 


k IQpl 1 

[count] := G /\ /\ /\ 

p—1 j—0 m—0 


(Tj A A mi) ^ G (mi_, ^ GT^+i) j 
(_L)] a _L|, a rrii) -G G (mi_i ^ 


[monotone] := G 


/\ {di -A di-i) 

.i=l 
k |Qp| + l 

A (T^ ^ T^-^) A ^ Tf 1) 

p=i j=i 
k 

[target] •= G /\ 

p—1 


ppCp + l ^ _,j_n(p)-Cp + l 


The idea of the reduction is as follows. Let Ad be a model 
of ip{I). For each proposition qi of {qi,..., qn) a world Wi 
is contained in Ad which has di labeled. If qi is in partition 
p{i), then in Wi the “signal” proposition T|[(i), resp., -Ld(i) 
indicates that the weight counter of this partition should be 
increased, where for each partition the ones and zeros are 
counted separately, ip [count] implements the counting, whereas 
t/> [target] ensures that every partition has exactly the desired 
weight (neither ones nor zeros are too many). 

The exact proof of correctness and of the K-boundedness 
of the pathwidth is omitted. The reader is instead referred to 
the thesis of Liick [11]. Using the equivalences Fa = -iG-ia, 
Ga = ^F-ia and Fa = TUa, the reduction is possible with 
any temporal operator except X. □ 


The next theorems were originally shown by Demri and 
Schnoebelen. Proposition 12 directly translates this into the 
world of parameterised complexity. 

Theorem 18 ([5]). If T G {X} or T C {F, G}, then the 
problem (LTL-SAT(r),td) is pava-NP-complete. 



Theorem 19 ([5]). //{F, X} C T, {G, X} C T or U e T, then 
the problem (LTL-SAT(T), td) is para-PSPACE-com;?Zefe. 


Theorem 20. ForT C {X}, the problems (LTL-SAT(r), tw^) 
and (LTL-SAT(T),pw^) are in FPT. 

Proof. It holds due to the path semantics of LTL that X((/) A 
f) = Xf A Xf, Xif W f) = Xf V Xf and X^f = -^Xf 
for € CTC. Hence every LTL formula with only X- 
operators can efficiently be converted to an equivalent Boolean 
combination (3 of X-preceded variables: 


^ = /3(X"i<7i,...,X"-g„), 



i times 


where the qi are propositional variables. Inconsistent literals 
can only occur inside the same world and therefore at the same 
nesting depth of X. Hence the above formula ip is satisfiable 
if and only if it is satisfiable as a purely propositional formula 
where the expression X"* qi is interpreted as an atomic formula 
(i.e., a variable). 

Formally we have (LTL-SAT(X),tw,^) (SAT,tw<^). 

Note that (SAT, tw,^) € FPT as a special case of CTL was 
shown by Liick et al. [12]. As path width is an upper bound 
for treewidth, (LTL-SAT(X),pw^) is in FPT as well. □ 

Unsurprisingly, all hard LTL fragments correspond to hard 
CTL fragments if we just supplement the operators with path 
quantifiers [12]. For the fragment CTL(AX) (or equivalently 
modal logic on serial frames) being in FPT [16] we how¬ 
ever need the temporal depth as an additional parameter. As 
satisfiable LTL formulas are already satisfied on paths and 
less expressive than modal logic, this extra parameter is not 
required for the F7X(X) fragment. 

In the next part we turn from satisfiability to model check¬ 
ing. 


B. Model checking 

It turns out that LTL model checking is surprisingly hard 
for almost all studied parameterisations. This is already the 
case in classical complexity theory. While model checking for 
CTL is P-complete, it is PSPACE-complete for LTL and CTL*, 
and is in fact NP-hard for every fragment with a non-empty 
operator set [1]. This inherent hardness is due to the different 
semantics of CTL and LTL: In CTL, every subformula of 
a formula is what is called state formula. A polynomial 
time algorithm is obtained by recursively determining fulfilled 
subformulas in every world of the model. LTL is built from 
path formulas which have no truth value w.r.t. to states but 
only to paths from the root of the model. This forbids P 
algorithms in the CTL style; hardness reductions to LTL model 
checking usually construct Kripke structures with few worlds 
and (exponentially) many paths between them. In fact, LTL 
model checking on non-branching structures is in P [13]. The 
reductions in this section follow this scheme and in general 
produce branching Kripke structures with certain properties. 

Long before the introduction of parameterised complex¬ 
ity theory, statements as early as from Lichtenstein and 
Pnueli already distinguished between program complexity, 


the runtime dependent on the length of the formula p, and 
structure complexity, the runtime dependent on the length of 
the structure A to be checked [10]. They stated that the runtime 
factor 21 “^ I in their algorithm does not prohibit efficient model 
checking as the size of the structure is clearly dominant in 
practice. 

In the context of parameterised complexity, this automatic¬ 
ally yields nice fixed-parameter tractable problems: 

Corollary 21. Let k{p,A,w) := \p\. Then (LTL-MC, k) S 
FPT. 

The next logical step is to study the influence of more para¬ 
meterisations on the model checking complexity: Define tw _4 
as the treewidth of the input structure, i.e., tw^((^, Al, tu) := 
tw(Al). Define tw^ as the structural treewidth of the input 
formula, i.e., tw^{p, A,w) := tw{Sip). Similarly define pw _4 
and pw^. 

Proposition 22 ([5, 19, 21]). LTL-MC(X, F, G, U) € PSPACE. 

Proposition 23 ([5, 19, 21]). For T C {X} or T C {F, G} it 
holds LTL-MC(T) G coNP. 

Definition 24 (Maximum branching degree). Let Al be a 
Kripke structure. Then write A(Al) for the maximum branch¬ 
ing degree in Al, i.e., the smallest number A s.t. every world 
in Al has at most A successors. 

Theorem 25. (LTL-MC(F), td -f A) is complete for para- 
coNP. 

Proof. We follow Sistla and Clarke who showed that 
LTLi-MC(F) (i.e., only F-operators without nesting) is coNP- 
hard. This is done by a reduction from the complement of the 
NP-complete 3SAT problem: Given a propositional formula p 
in 3CNF, is it satisfiable? 

For this we construct a formula ip G £7Xi(F) and a 
structure S with constant branching such that {S,wo) ^ 
Ip if and only if p is unsatisfiable. First assume p = 
NiLi V Li ^2 V Li, 3 ) where Lij is a literal, i.e., a pro- 
positional variable or its negation. Then simply define ip := 
Vfci (F“'Li,i A F-'Li ,2 A F-iLi, 3 ), so ip is basically the nega¬ 
tion of p supplemented with F operators in front of the literals. 

Assume that p contains variables {a;i,..., Xn}. For a cor¬ 
rect reduction the structure S is now required to allow either 
fxi or F-iXi to hold for I < i < n, but not both. Also, for 
every subset X C {xi,... ,x„} of variables (which can be 
interpreted as the assignment that sets exactly the variables in 
X to true) there should be a path through S and vice versa. The 
structure depicted in Figure 2 has these property and therefore 
models propositional assignments as runs from its initial world 
wq. This means that all runs in S fulfill the path formula 
Ip if and only if -^p is satisfied by all Boolean assignments. 
Hence p ^ 3SAT {ip,S,wo) G LTLi-MC(F). ip and S are 
both constructible in linear time. The para-coNP-completeness 
follows from Proposition 12 and Proposition 23. □ 

This results may be surprising at first sight. As LTL is easy 
on non-branching structures, one could expect that bounding 



Xl X2 X3 Xn 



-•Xi -'X2 ^X3 -iXn 


Figure 2. Structure that models propositional assignment as runs. 

the branching degree leads to an easy problem as well, but in 
fact already a branching of degree two is sufficient to express 
coNP-hard model properties. 

Theorem 26. Let T C {X}. Then (LTL-MC(T),td) € 
coW[P]. 

Proof. Let a formula (p S CTC{)f) and a structure A with 
root w be given. Now it holds that {A, w) if and only if 
there is a path tt S n(w) s.t. (.4, tt) ^ ip. But this depends 
only on a finite prefix of tt that has length td(<y5). So to 
determine if the given formula is not satisfied by the structure, 
simply guess a finite path of length td((p) through A and 
verify the formula. This requires at most 0{x.d{Lp) •log|.4|) 
non-deterministic steps (using pointers to denote worlds) and 
leads to coW[P] according to 8. □ 

Theorem 27. (LTL-MC(T), td + A) e FPT/or T C {X}. 

Proof. Instead of guessing a path of length td(i^) for given 
(p as in Theorem 26 do an exhaustive search by iterating the 
successors of each world. This leads to a runtime of ■ 

□ 

Note that this tractability result differs from the intractability 
result of Theorem 25 only in the allowed temporal operator. 
This shows that the expressive power of X is (obviously) 
tightly bounded to its allowed nesting depth. 

Theorem 28. For any non-empty set T of temporal operators 
(LTL-MC(T),pw_^+A) and (LTL-MC(r), tw^+A) are hard 
for para-coNP. 

Proof. This is shown using the same argument as in The¬ 
orem 25. The structure S used there has a constant path width 
(and therefore treewidth) of at most three; One bag Bq contains 
the worlds wo,Wi ,wf, where wf (w~) is the unique world 
in S that has Xi (^Xi) labeled. Further bags Bi contain 
wf and for 1 < i < n. Connecting the bags 

Bi and for 0 < i < n results in a path-decomposition 
of S with width at most three. The maximum branching of 
the structure is as well constant. For X G T we modify the 
reduction given in the proof of Theorem 25. Simply replace the 
subformula FL^ by X*Li in the formula and the reduction stays 
valid. This substitution leads only to polynomial blowup. □ 

Corollary 29. If f G T or G G T, then (LTL-MC(T), pw^ + 
A -F td) and (LTL-MC(r), tw^ -F A -F td) are hard for para- 
coNP. 


Theorem 30. If U G T or {X, F} C T or {X, G} C T, then 
(LTL-MC(r),pw _4 + A-Ftd) and (LTL-MC(T), tw^-F A-Ftd) 
are complete for para-PSPACE. 

Proof. The hardness is shown similar to the reductions in 
Section 5 and 6 of [5]. To obtain a constant out-degree, 
resp., pathwidth in the structure, the problem 3QBF instead 
of QBF must be used which is also PSPACE-complete. 3QBE 
is defined like QBE but has a matrix in 3CNE. The final world 
shown in Eigure 5 of [5] has still a larger out-degree, but it 
can be cloned to a binary tree with out-degree two. This does 
not influence the satisfaction of the U formula as U is stutter- 
invariant. □ 

The presented results imply that even very simple Kripke 
structures are hard to check for certain properties. This is 
consistent to usual LTL model checking algorithms since they 
already have runtime exponential in |(^| but only linear in |.4|. 
Therefore we now turn to more parameterisations of the LTL 
formula itself. 

Let denote with ^Var((p) the number of distinct proposi¬ 
tional variables occurring in ip. 

Theorem 31. The parameterised problems 
(LTL-MC(X),tw^), (LTL-MC(X),#Var), (LTL-MC(F),tw<^) 
and (LTL-MC(F), #Var) are complete for para-coNP. 

Proof. The hardness is shown by Demri and Schnoebelen 
by reduction to a formula with constant number of propos¬ 
itions. This also leads to a formula with a constant structural 
treewidth as every syntax graph without variables already is 
a tree (i.e., has treewidth one) and every propoition increases 
the treewidth only at most one. □ 

Theorem 32. (LTL-MC(F),tw<^) and (LTL-MC(F), #Var) 
are complete for para-coNP. (LTL-MC(F,X),tw^) and 
(LTL-MC(F, X), ^Var) are complete for para-PSPACE. 

Proof. Shown in [5]. X, F can encode the PSPACE-hard QBE 
problem in a model checking instance using only a single 
proposition, but label this proposition in worlds of different 
depth. If the only operator is F, then propositional satisfiability 
can be simulated. However then two variables are required, as 
a world of certain depth can only be exactly reached by F 
using a certain form of alternation. This “alternation” trick 
is necessary since future is reflexive (like in most temporal 
logics) and hence the present is a part of the future. □ 

It seems that in the reductions a large temporal depth can 
neither be avoided for F nor for X. Therefore it is unlikely 
that para-coNP-hardness or para-PSPACE-hardness for model 
checking stays w.r.t. the parameterisation td-Ftw^. Therefore 
we now consider variants of the Tiling problem for alternative 
reductions. 

Definition 33 (Tiling). Let C be a finite set of colors and 
D C a set of tiles. Every tile has four sides, namely up, 
down, left and right, which each have a color c G C. Use 
the quadruple notation to explicitly write the colors of a tile: 




Figure 3. Structure that models square tilings as runs. 


d = (cii, Cd,ci,Cr). A D-tiling for a discrete area i? C N x N 
is a function : R ^ D. 

Write j{x,y) = {{x,y)u,{x,y)d,{x,y)i,{x,y)r). Then 7 
is a valid tiling if for every {x,y), {x',y') € R holds: 

. if a;' = a: and y' = y + 1, then (a:, y)d = {x\ y')u, 

• if a;' = a: + 1 and y' = y, then (a:, y)r = {x', y')i. 

Definition 34. The problem SquareTiling contains the 
instances {C, D, {k)i) for which the k x k-gnd has a valid 
£)-tiling. Here, (•)i denotes a unary encoding. 

Proposition 35 ([2]). Let Z?, {k)i) := k. Then the para- 
meterised problem (SquareTiling, k) is W[l]-compfefe. 

Theorem 36. (LTL-MC(X),td+pw^) and (LTL-MC(X),td+ 
tw<^) are coW[l]-harcZ. 

Proof. The idea of the proof, a reduction from SQUARETIL¬ 
ING to the complement of the problems in the theorem, is to 
use the path semantics of LTL to describe a valid tiling of the 
k X k grid: For every SQUARETILING instance {C,D, (fc)i) 
we construct a formula ip and structure S. ip will have k- 
bounded temporal depth and structural pathwidth. The Kripke 
structure S however will have unbounded branching degree A 
(which is unlikely to be avoided as LTL-MC(X) is already in 
FPT with parameter td -f A). 

Construct S as follows: 

• Add worlds Wstart and w^nd with the proposition yend 
labeled in Wend- 

• For every tile d G D and for every i G [fc^] add a world 

^d- 

• Connect Wstart to for every d G D. 

• Connect to Wend for every d G D. 

• Connect to for every d,d' G D and 1 < i < k"^. 

• Connect w^nd to itself. 

• In every world with d = (c„, Cd,ci,Cr) label propos¬ 
itional variables c^, c^, c], dp. 

• In every world where i = k ■ j for j G [k] label a 
propositional variable (/border- 

The structure S is illustrated in Figure 3. It models (not 
necessarily valid) tilings 7 as runs from Wstart by “serializing” 
the square into a path: It contains k worlds for the first row, 
another k worlds for the second row appended to the first w 


worlds, and so on to the fc-th row, resulting in a total of 
worlds on each path (besides Wstan and Wend)- At the same 
time, there are \D\ successors that a path can use to select the 
next tile in the current (or next) row: For every place (z, j) G 

[fc] X [k] a tile d is selected by visiting the corresponding world 

(i-l)-fc-l-i 

Now we give the path formulas that verify that the tiling 7 
described by a run tt G n(r(;start) is valid. 

V’c.r ■= [^border V (c* X(gend V cj+^))] 

:= [cd^X^ (ge„dV4+'=)] 

The formula ipp ^ is true in a path tt starting in a world 
(which has color c to the right) if tt chooses a matching 
successor: Either is a border and the color to the right is 
not relevant, or has Wend as immediate successor and the 
tiling is complete, or the color matches the left color of the 
next tile. 

Similar, the formula ipp ^ ensures that the tile directly below 
the current one (which lies in distance exactly k in the 
structure) has the matching up color or is already beyond the 
last row. 

We form the conjunction over every color c and every i: 
e V 

i=i I cec 

Claim. S and ip can be constructed in fpt-time. 

Proof of claim. The structure S can be constructed in time 
0{\D'^ ■ k'^) and the formula ip can be constructed in time 
0(1(71 • k^), which is both polynomial since k is encoded 
unary in SquareTiling. ■ 

Claim. Let tt = ■ • ■ ,wf(^k^),Wend, ■■.) be 

a run through S, where f: [fc^] —> D selects the tile at each 
step. Then it \= ip if and only if /(I), /(2),..., f{k^) form a 
valid tiling of [k] x [k]. 

Proof of claim. Assume there are (x, y) and (x', y') such 

that the tiling conditions are violated. 

• Case 1: x' = x -f 1 and y' = y. Then x k, {x,y) 

has right color c and (x + l,y) has left color c' f c. 
Let z := (x — 1) • fc -f y. By definition of tt it holds that 
7r[l] = Wstart and 7r[z + 1] = z«}(i)- But as is not a 

border and 7r>i_|_i \= ipp, so the successor has c as left 
color. But this means that dp is labeled in Wj(j) and 

is labeled in ,,, contradiction to c' f c. 

fd+i)’ ' 

• Case 2: x' = X and y' = y -f 1 which is similar proven 
as Case 1. 

“<^=”: Let /(I), /(2),..., /(fc^) be a valid tiling 7 of [k] x 
[k]. Assume that ^ip holds, i.e., there is a color c and an z 
s.t. Tt>i+i does not satisfy fir Xipp d- fl r false, then 
is not a border but also has a different right color than 
its successor on tt has as left color. But then 7 would not 
be a valid tiling. The case that ipp, ^ is false can be handled 
analogously. ■ 







It is easy to see that every run tt through S 
from tUstart has the form as in the above claim, i.e., 
TT = (wstart, w^( 2 ), • ■ • Wend, ■ ■ •)■ Hence we get 

(C, D, k) € Squaretiling if and only if Btt g n(r(;start) : 
(<S, tt) \='4) if and only if (-ii/;, 5, rustart) ^ LTL-MC(X). 

Claim. The formula ip has temporal depth k'^ + k and 
structural pathwidth at most + fc + 15. 

Proof of claim. The temporal depth of + fc is the nesting 
depth of X operators in f. 

For the pathwidth we construct a path-decomposition V of 
ip as follows: For every i G [fc^] and every color c G C we 
create an isolated bag Bf The bag contains the nodes 
representing 

• the Boolean connectives V, —> and V in ipl 

• the Boolean connectives and V in 

. the variables gborder, ^end, 4, and 

• the single X-operator in iplj., 

• the k X-operators in V’c d- 

The isolated bag covers every edge between nodes rep¬ 
resenting subformulas of ipl ^ and i/;* ^ with a width of 
\Bf\ = i + 2 -\- f> -\- f + k = 'k + f2. Also every subformula 
of i/;* ^ and ip^ ^ except (/border and (/end occurs exactly once 
in Ip, hence every such subformula of ip trivially induces a 
connected path in V. But as (/border and (/end are added into 
every bag B^ they also induce a connected path as soon as 
the bags are connected. 

To handle the remaining connectives including the “big 
conjunctions” of size ICI, proceed as follows: First for every 
formula ^ := (fl ,. A add ^ to Bf 

Assume that the colors are ordered as ci, C 2 ,..., c\c\^ and 
that the big conjunctions have the structure ((((,^i A ^ 2 ) A 
Ca) • • OA^Ici)- For every j, 1 < j < \C\ then connect the bags 
Bl^ and B^.^^ by inserting an edge in V, and add the j-th A- 
nocle into both bags. Then after inserting the last conjunction, 
add the i nodes for X® to ^c|ci’ finally add the nodes for 
the conjunction of size k^ to every bag. These steps increase 
the size of every bag by at most + 3. 

As V now consists of k^ disconnected sequences of \C\ 
bags each, concatenate them into a path in arbitrary order. 
This leads to V being a connected path; and the variables 
(/border and (/end as Well as the nodes of the fc^-conjunction 
now induce connected subpaths. ■ 

From the claims a valid fpt-reduction follows and thereby 
we conclude the theorem. □ 

Note that with only X the temporal depth of again 
is unlikely to be avoided, as for fixed temporal depth the 
problem LTL-MC(X) is already solvable in logspace and 
in fact equivalent to checking assignments of propositional 
formulas [5]. 

Theorem 37. Let f- G T, G G T or Vi G T. Then 
(LTL-MC(T),td -f pw^) and (LTL-MC(T),td -f tw<^) are 
ccW[l]-hard. 


Proof We adapt the reduction given in the proof of The¬ 
orem 36. First label a new depth proposition di in every world 
for dGD,\<i<k^. Then change the formulas as 
follows: 

V’c.r ■= [^border V (c® F(cj+^))] 

[c^ ^ F if / -F A: < 

T otherwise 

'='-1 r / . \' 

ip-= f\ ^{diL f\{%p\^L%p\^)\ 
i=i L ^ cec ^. 

This does increase the pathwidth at most by k^ for 
di,... ,di; 2 . Also Fa can be replaced by -iG-ia and TUa 
for the remaining cases. □ 

Definition 38. The problem RectangleTiling contains the 
tuples {C,co,ci, D) for which there is an m G N such that 
the \D\ X m-grid has a valid D-tiling 7 with the color cq at 
the top edge and ci at the bottom edge. 

Proposition 39 ([3]). The problem RectangleTiling is 
PSPACfi-complete. 

Theorem 40. If {X, f-} C_ T or {X, G} C T, then the prob¬ 
lems (LTL-MC(r),pw^) and (LTL-MC(T),tw^) are para- 
PSPACE-complete. 

Proof. We consider a <^-reduction from RectangleTiling 
to LTL-MC(X, F) such that only LTL formulas with constant 
pathwidth (and therefore constant treewidth) are produced. 
This proves the theorem according to Proposition 12 and 
Proposition 22. This reduction originally from Sistla and 
Clarke is to show the PSPACE-hardness of general LTL model 
checking. We modify it to obtain a constant pathwidth. 

Write the shortcut n := \D\. Then similar to the proof of 
Theorem 36 we construct a Kripke structure S that models 
n X m-tilings as runs: 

• Add worlds tCMt, Wright and Wend which each have only 
one proposition labeled, namely (/left, (/right, and (/end. 

• Lor every tile d G D and every i G [n] add a world wf 

• Connect WMt to wp for every d G D. 

• Connect to Wright for every d G D. 

• Connect to for every d,d' G D and 1 < f < n. 

• Connect Wright to Wend, Wright to WMt and Wend to itself. 

• In every world with d = (cu,Cd, ci,Cr) label propos¬ 
itional variables Cu, Cd, ci, Cr. 

The structure S is shown in Ligure 4 and models tilings as 
follows: A run tt starts in wieft and visits a row of n worlds 
These worlds are the first row of the tiling. In every of the 
n steps, TT may decide for any of the \D\ possible successors 
(which correspond to tiles). The back edge from tCright to wieft 
may be used then an arbitrary number of times, constructing 
a tiling consisting of many rows. The path may then enter the 
state Wend and stay there forever. 




Figure 4. Structure that models rectangle tilings as runs. 


We use the following formulas to check if the tiling is valid. 
First ensure that the complete first row has up color cq: 

n 

:= A 

i=l 

Check the neighbor to the right and below (if it is not the 
border); 


^c,r — [Cr ^ ^ (O'right V Cl')] 

'>Pc,d ■= [Cd-^ X"+2 (gend V C„)] 


The last row must exist and have down color ci: 


V’last •— F 


< 7 left A (X"''‘^( 7 end) A A X*(ci)d 




The whole tiling is expressed by ip: 

■— '^first A Iplast A “'F“' idPc^r A 1pc,d) 


cec 


Similar to Theorem 36 is the case that there is a valid nxm- 
tiling if and only if a path starts in wieft and satisfies ip. 


Claim. The formula ip has constant structural pathwidth. 


Proof of claim. We construct a path-decomposition 7^ of i/; as 
follows. Ignore the variables (co)„, (ci)d, gught and ^end as 
they can be added to every bag at the end, increasing every 
bag size only by five. 

Now first process the formula It contains n “chains” 
of X-operators. For each such chain create a row of bags. For 
j = 1,..., n—1 then add the j-th and the (j-l-l)-th X-operator 
node to the j-th bag, so the edge in the syntactical structure 
between them is covered. Then the big conjunction is handled 
as in the proof of Theorem 36, connecting the n rows of bags 
to a single path, increasing the width by at most two. 

The formulas ipc.r have each constant length, so for every 
c G C put all of the nodes of subformulas of ipc.r into a 
single bag and append it to V. This does not violate the path- 
decomposition rules as every variable Cr, ci appears only once 
in the whole formula ip. 

The length of ipc.d depends on n, but the chain of n -f 2 
X-operators can be decomposed like in i/'first, leading to n -f 2 
new bags with each constant size. 


The length of ^last is again not constant; it contains a big 
conjunction of chains of X-operators as well as another single 
chain with gend inside. Decompose the chains and the big 
conjunction as in i/'first- The edges connecting them to the 
remaining number of constantly many A-nodes and the F 
node can then be covered by adding the nodes to every bag, 
increasing the size only by a constant. 

Finally for covering the whole formula ip in V, we need 
to insert the remaining small A-operators, negations, and the 
F into every bag; and to decompose the big conjunction for 
every color c append the bags of the ipc.d formulas in the 
right order, again adding the small conjunction parts of the 
big conjunction. ■ 

From the above claims and Proposition 22 the para- 
PSPACE-completeness follows. □ 

Theorem 41. (LTL-MC(U),td+pw^) and (LTL-MC(U),td-f 
tw<^) are para-PSPACE-comp/efe. 

Proof. Eor the Until operator the reduction from the proof of 
Theorem 40 is possible in constant temporal depth. Similar to 
the proof of Theorem 37 adapt the structure S and supplement 
the labeled color variables Cu,Cd,ci,Cr by their depth-aware 
versions, i.e., c^, c^, cj and c* for 1 < i < n. 

Modify the formulas as follows: 


V^first •— [^left V (co)u] Uc^right 

V’last •— TU [^left A [(o'left V (cijci) U(/right]] 

iPl^, := 4 ^ [4U4+1] 

V’c.d ■= 4 [c^U (“'CdU(< 7 end V C^))] 


'4^ •— V^first V’last ^ 


TU^A a «r^rc,d) 

i=icec 


The variables (co)u, {ci)d, qi&ft, and bright can again be added 
to every bag of a path-decomposition V of ip. The only part 
of Ip that is not constant is the conjunction over the n • |C'| 
subformulas ip). ^ and ip'p But each such subformula ■0® 
resp., 0® ^ can be covered by a single isolated bag: It has 
only a constant number of nodes and every occurring variable 
is either subformula-local or is already added to every bag. 

Then it remains to decompose the big conjunctions which 
can be done in two steps. Eirst connect the isolated bags for 
the inner conjunction and add the small conjunction nodes as 
needed. Then connect the resulting chains of length \C\ to 
finalize the path-decomposition V that has a constant width. 

□ 


IV. Conclusion 

We showed that the intractable satisfiability and model 
checking problems of LTL cannot be tamed by applying the 
toolbox of parameterised complexity theory, at least not for the 
chosen well-known parameters. The model checking hardness 
is solely caused by the path semantics of LTL in branching 
Kripke structures. This conclusion holds both for the full 
set of LTL operators and for every operator fragment; the 
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Figure 5. Overview over LTL parameterisations with their complexity. 


only exception is the case with only the X operator and a 
special parameterisation that allows a depth-bounded search 
tree algorithm. As LTL is a special case of CTL*, the hardness 
results immediately hold for CTL* as well. 

A future research possibility is to continue the search for 
tractable parameters of LTL. The ultimate goal is to find a non¬ 
trivial parameter, i.e., lower than the one of Lichtenstein and 
Pnueli, that allows fixed-parameter tractability for all LTL op¬ 
erators. A first step could be LTL instances of simultaneously 
bounded formula treewidth and input structure treewidth. 
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